On 2026/10/18 23:18, Laurence Tratt wrote: > Hello ports, > > I just updated my packages and since last week something has changed for > gkrellm which now terminates on start with: > > /usr/local/bin/gkrellm: not supposed to be setgid, aborting > > I must admit that I didn't know it's setgid but it really is: > > $ ls -lh /usr/local/bin/gkrellm > -rwxr-sr-x 1 root kmem 1.2M Oct 17 16:03 /usr/local/bin/gkrellm > > Whether _all_ of gkrellm needs `kmem` levels of privilege or not, I don't > know. But, presumably, either gkrellm will need fixing for (what I presume > are) new security arrangements, or perhaps it can't be fixed? > > > Laurie >
Given the changes in patches/patch-src_sysdeps_openbsd_c, as far as the main gkrellm port goes, it seems to only be used for the TCP connection info seen in sysdeps/bsd-net-open.c which is probably not a good enough reason to keep it sgid kmem. I haven't looked into plugins though. I think we should remove the sgid bit and see if anyone complains.
